Find a TenderAwarded

Published 19 Dec 2025, 16:00 GMT

Official UK procurement notice

FTS050 Data Protection Services Framework

Authority: Highlands and Islands Enterprise·Consortium: 7 public authorities

Framework agreementServicesOpen procedureSME suitable

Sectors: IT Services & Software (72)Administration, defence and social security services (75)Business Services & Consultancy (79) Delivery: Scotland (UKM)

Framework ceiling (notional)£287,000framework ceiling, not attributable revenue

Submissions closed 9 Feb 2026awarded 6 Apr 2026

What is being bought

Published requirement description

HIE requires a suitably qualified and experienced supplier to provide provide data protection services, including fulfilling Data Protection Officer duties under the General Data Protection Regulation and supporting the Data Protection Act 2018 including delivery of data protection advice, risk assessment and training.

This Framework is being procured for Highlands and Islands Enterprise (HIE) and on behalf of Wave Energy Scotland (WES), Orkney Research Innovation Campus (ORIC), HIE Orkney, HIE Ventures Ltd (HIEVL), Cairngorm Mountain (Scotland) Ltd (CMSL), South of Scotland Enterprise (SOSE) as well as any other Contracting Authority wholly or partly under the control of, and/or partly or wholly owned HIE or SOSE, at any point during the term of this Framework (subject to case-by-case approval by HIE).

The framework is live from 8 April 2026 until 7 April 2029, unless terminated in accordance with the provisions of the Framework agreement, with HIE having the option to extend for a period or periods together not exceeding 1 year following the Initial Term (until 7 April 2030).

Recurrence: HIE reserves the right to re-tender for these services upon termination or at the end of the contract, including any extension period.

CPV: Auditing services · Business and management consultancy services · Business development consultancy services · Data services · Legislative services

How this framework works

From the published notice

Places: up to 1 suppliers · 12 bids received (12.0 per place) · 1 appointed (full)

The lotProcurement structure

single lot · value published

Lot #1Objective 1 - Role of Data Protection Officer (DPO) as specified in the General Data…AwardedRenewalPublished value£287,000

Objective 1 - Role of Data Protection Officer (DPO) as specified in the General Data Protection Regulations and in support of Data Protection Act 2018

Objective 2 - Monitor and remedy noncompliance and support personal data breach resolution

Objective 3 - Organisational Compliance with Data Protection Legislation

Objective 4 - Data Protection Impact Assessment (DPIA) process including advice and support

Objective 5 - Reporting and monitoring Additional information: Economic operators may be excluded from this competition if they are in any of the situations referred to in Regulation 58 of the Public Contracts (Scotland) Regulations 2015.

Delivery: Scotland

Extensions: HIE reserves the right, on giving reasonable written notice from time to time, to require changes to the Services (whether by way of the removal of Services, the addition of new Services, or increasing or decreasing the Services or specifying the order in which the Services are to be performed or the locations where the Services are to be provided). HIE shall not require any such change other than where it is permitted by Regulation 72 of the Public Contracts (Scotland) Regulations 2015. The Framework/Call-off Contracts may be modified for reasons including but not limited to: -Changes to budget availability -Organisation/s bringing the services in-house fully or partially and so the services are no longer required / reduced services are required -The addition of similar services -Increasing the volume of the services -Change in legislative requirements resulting in increased or reduced service In these situations, for the call-off contracts, HIE will agree a price variation based on the pricing submitted as part of your bid, for example, using the hourly rate to increase/reduce the services by a number of hours. Other framework users may also modify their relevant call-off contracts. · The contract will be awarded for an initial period of 3 years, unless terminated in accordance with the provisions of the Framework agreement, with HIE having the option to extend for a period or periods together not exceeding 1 year following the Initial Term.Variant bids: not allowed

72300000 Data services 75111200 Legislative services 79212000 Auditing services 79411100 Business development consultancy services

What it takes to win
i
How this buyer will score bids.
The evaluation criteria and weights exactly as published on the notice, grouped by family (price, quality, social value and so on).

Evaluation split and conditions of participation as published; the tender pack may add more

How bids were scored

Quality: 60%Price: 40%

Published sub-criteria (6)

Management and Delivery Methodology: 20%
Responsiveness and Business Continuity: 13%
Management and Delivery Team: 20%
Monitoring and Reporting of Community Benefits: 2%
Fair Work Practices: 5%
price: 40%

Published award criteria (9)

Prompt Payment Standard Clause: pass/fail
Cyber Security: pass/fail
Payment of the Real Living Wage: pass/fail
Management and Delivery Methodology: 20%
Responsiveness and Business Continuity: 13%
Management and Delivery Team: 20%
Monitoring and Reporting of Community Benefits: 2%
Fair Work Practices: 5%
Price: 40%

Conditions of participation2

Suitability
4A2A Bidders must provide, or commit to provide prior to the commencement of the framework agreement, an up-to-date Level 1 disclosure from Disclosure Scotland for the DPO, the DPO’s deputy/ies and all personnel with access to Framework User systems or business information. (Information on how to apply for a Level 1 disclosure is available online at www.mygov.scot/apply-for-level-1-di… ↗.)
Condition of participation
no text published
Minimum: It is a requirement of this Contract that bidders hold, or can commit to obtain prior to the commencement of any subsequently awarded Contract, the types and levels of insurance indicated below: 4B5A Professional Risk Indemnity - GBP 3 million for each and every claim 4B5B Employ…

Staff: Names and qualifications of delivery staff must be submitted

What this means for your bid

Price carries 40 of 100 points: a 10% discount moves about 4 points. The method statement decides this lot, not the discount.
“FTS050 Data Protection Services Framework” is a framework: the contest is a place on its panel, up to 1 suppliers, not a single contract.

Price arithmetic assumes straight proportional scoring; the tender pack may use another formula.

Procedure terms & legal framework

From the official record · publisher note attached

Procedure method: Open procedure
Legal basis: CELEX · 32014L0024 Public Contracts Regulations 2015 (Directive 2014/24/EU)
Procurement category: Services
Notice status: Awarded
Procurement threshold: Unspecified in notice
Regulatory regime: Standard
Commercial structure: Framework agreement
Who may use this agreement: Not stated in the notice; call-off rights may be limited to the establishing authority
Competition type: Competitive procedure
GPA / WTO covered: Yes (GPA)
Recurring procurement: Yes · HIE reserves the right to re-tender for these services upon termination or at the end of the contract, including any extension period.
First published: 19 Dec 2025, 16:00 GMT
Last source update: 8 Apr 2026, 13:59 BST
Award evaluation window: 9 Feb 2026 – …
Authority reference: FTS 050
FTS notice number: 2026/S 000-031962
Classification (CPV): Auditing servicesBusiness and management consultancy servicesBusiness development consultancy servicesData servicesLegislative services
Delivery area: Scotland (UKM)
Official registry OCID: ocds-h6vhtk-05fac3 Find a Tender

Contract terms

Electronic trading: e-invoicing allowed · electronic ordering · electronic payment
Performance terms: See Scope of Requirements and Tender Guidance document.

Publisher note: The figure stated in section II.1.7 and V.2.4 refers to the maximum framework value including the optional extension period. (SC Ref:827694)

How it was run

Official notice

Run through: Public Contracts Scotland · Who buys & how to bid on PCS

Supplier login requiredLanguage: EN

Access & registration note: Free single registration for Scotland; PCS-Tender (Jaggaer) for full bidding

Appointment period ends: 9 Feb 2026, 12:00 GMT
Submission channel: {"electronicSubmission"}
Accepted languages: en
Bid validity: 90 days from the deadline
Bids opened: 9 Feb 2026, 12:00 GMT

Detailed submission instructions & authority contactsFrom official release

www.publiccontractsscotland.gov.uk ↗

Timeline

9 Feb 2026 → 8 Apr 2026 · 3 dates

Admission / appointment period ends255 days ago · period end, not a bid countdown
9 Feb 2026, 12:00 GMT
Bids opened255 days ago
9 Feb 2026, 12:00 GMT
Notice published197 days ago
8 Apr 2026, 13:59 BST

Notice history

1 event · 2 releases on Find a Tender

Status changed to complete
8 Apr 2026, 13:59 BST

Commercial outcome & contract awards

Published awards, contracts and bid statistics, not a forecast

Suppliers appointed 1admitted to the panel · see the list ↓

Bids received 1211 from SMEs

Contracts signed 1latest 6 Apr 2026

1 suppliers are admitted to this framework without individual award values or dates, see the supplier list below.

Contracts

Contract 031962-2026-FTS 050-1
Signed
6 Apr 2026
Value
£287,000
Status
active

Bid statistics published by the authority

Bids	SME	VCSE	Valid bid range
12bids · 12 electronic · 12 from abroad	11	—	—

Contracting authority & participating public bodies

7 public bodies on the notice

Highlands and Islands Enterprise

Contracting authorityRegional or local agency/officeEconomic affairs An Lòchran, 10 Inverness Campus, Inverness, Scotland, IV2 5NAContact email, phone Published organisation website ↗

Consortium members and other public bodies

Cairngorm Mountain (Scotland) LtdContracting authority Aviemore, ScotlandContact email, phone
HIE OrkneyContracting authority Inverness, ScotlandContact email, phone
HIE Ventures Ltd.Contracting authority Inverness, ScotlandContact email, phone
Orkney Research and Innovation Campus LLPContracting authority Stromness, UKContact email, phone
South of Scotland EnterpriseContracting authority Dumfries, UKContact email, phone
Wave Energy Scotland LimitedContracting authority Inverness, ScotlandContact email, phone

Dispute resolution & review bodies

Inverness Sheriff Court and Justice of the Peace CourtReview body InvernessContact email, phone

Framework contractors & participating bidders

1 commercial party on the notice

Tkm ConsultingFramework contractor Craigellachie, Ratagan, Glenshiel, UK, IV40 8HP

Official documents & specifications

Official links; attachments are not copied

No document links were published on the notice.